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AfiSTHACT 


Aircraft  combat  survivability  has  developed  into  a 
discipline  of  its  own.  This  thesis  presents  a  brief  over¬ 
view  of  the  two  integral  parts  of  survivability,  suscepti¬ 
bility  and  v\ilnerability.  It  examines  the  probability  of  an 
aircraft  being  killed  given  a  single  shot  fired  by  the  enemy. 
It  further  examines  the  redundancy  of  critical  components  and 
the  effect  redundancy  has  on  the  probability  of  kill  of  the 
aircraft.  Several  numerical  examples  are  given.  The  thesis 
also  examines  the  Antiaircraft  Artillery  Simulation  Computer 
Program,  and  the  modifications  required  in  order  to  intro¬ 
duce  conponent  redundancy  into  it  are  developed. 
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1.  INTBODOCTION 


Since  World  War  I,  edrcraft  conbat  survivability  has 
becone  a  factor  of  constantly  increasing  iioportance  to  both 
pilots  and  aircraft  designers  alike.  The  definition  of  air¬ 
craft  combat  svirvivabllity  which  will  be  adopted  in  this 
study  is  "the  capability  of  an  aircraft  to  avoid  and/or 
withstand  a  inan-made«  non-nuclear  hostile  environment"  [l]. 

Given  an  aircraft  flying  in  a  hostile  environment, 
there  is  a  probability  that  the  aircraft  will  be  hit  by  a 
damage  causing  mechanism  and  a  different  probability,  that 
the  damage  causing  mechanism  will  have  the  catastrophic 
effect  of  killing  the  aircraft.  These  two  probabilities  are 
of  paramount  Importance,  and  they  will  be  given  special 
attention. 

The  probability  that  the  aircraft  will  be  hit,  , 

is  usually  referred  to  as  the  susceptibility  of  the  aircraft, 
while  the  probability  that  the  aircraft  will  be  killed,  given 
that  it  has  been  hit,  called  the  vulnerability 

of  the  aircraft. 

A.  SUSCEPTIBILITY 

Assuming  that  the  eneny  is  alert  emd  possesses  weapons, 
2U.rcraft  susceptibility  is  influenced  by  the  enemy's  ability 
to  detect,  identify  and  track  the  aircraft;  launch  and 
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direct  threat  propagators  toward  the  aircraft;  and  detonate 
them  at  or  near  the  aircraft.  If  one  identifies  two  phases 
during  the  flight  of  the  aircraft,  i.e.,  prelaunch  and  after 
launch  of  the  threat  propagator,  then  these  abilities  can  be 
me  as  tired  by  ,  the  probability  that  the  aircraft  has  been 

detected,  identified  and  tracked,  and  by  ,  the  proba¬ 
bility  that  a  threat  propagator  is  being  launched  and 
detonated  at  or  near  the  aircraft.  Thus,  susceptibility  P„ 

n 

is  given  by 

Ph  »  Pt  * 


B.  VULNEBABILITY 

Aircraft  vulnerability  is  primarily  influenced  by  the 
aircraft's  design.  Any  survivability  features  built  into 
the  aircraft,  such  as  redundancy,  armor  plating,  and  the 
ability  of  critical  components  to  operate  after  taking  a 
hit,  will  decrease  its  vulnerability,  * 

The  probability  of  the  aircraft  being  killed,  P^  ,  is 
the  product  of  its  susceptibility  and  vulnerability.  Thus 

*  **K/H 

Pj^  is  related  to  the  probability  of  survival  of  the  edr- 
craft,  P  ,  by 

9 

P3  -  1  -  Pj,  (3) 
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This  study  will  examine  the  computation  of  the  proba¬ 


bility  of  kill  of  an  aircraft  and  how  it  is  effected  by 
redundancy  and  the  number  of  hits  that  the  aircraft  has 
taken. 


II.  PROBABILITY  OF  KILL  GIVEN  A  SINGLE  SHOT 

The  probability  of  an  aircraft  being  killed  given  a 
single  shot,  ^kss  '  based  on  the  assumptions  that  the 
eurcraft  has  been  detected,  cuid  that  a  threat  propagator  has 
been  fired  or  launched.  With  these  assumptions,  the  Pj^3g 
becomes  solely  a  function  of  the  fire  control  system's 
ability  to  direct  the  threat  propagator  in  the  vicinity  of 
the  aircraft  and  the  aircraft's  vulnerability.  Thias,  the 
expression  for  the  Pj^gg  i*'  a  one- dimensional  analysis  is 


KSS 


■r 


pH(x)  *  ^ 


(4) 


and  in  a  two-dimensional  analysis  is 


KSS 


■n 

*^—00 


pH(x,y)  *  dxdy 


(5) 


where  Pu(x)  is  the  probability  of  hit  density  function  at 
X  ,  and  is  the  probability  that  the  aircraft  will 

be  killed  given  that  it  has  been  hit  at  x  . 


A.  PROBABILITY  OF  HIT  DENSITY  FUNCTION 

The  probability  of  hit  density  function  is  the  mathe¬ 
matical  expression  of  the  2d3ility  of  a  fire  control  system 


11 


to  direct  a  threat  propagator  in  the  vicinity  o£  the  air~ 
craft.  In  most  ^1^33  assessments,  the  normal  or  Gaussian 
density  function  is  used.  If  the  propagator  paths  are 
uniformly  distributed  around  the  aircraft,  the  one¬ 
dimensional  circular  normal  is  applicable.  This  function 
has  the  form 


PH(r)  “  7  ^  ^ 


0  <  r  < 


where  r  is  the  propagator  miss  distance  (with  respect  to 
r  «  0)  ,  and  o  is  the  standard  deviation,  which  is  a 
measure  of  the  dispersion  of  the  shots  about  the  target. 
This  density  function  used  to  determine  the 

probability  that  any  shot  will  have  a  miss  distance  that 
lies  within  a  certain  band  defined  by  r^  and  X2  •  This 
probability  is  given  by 


^1  4, 


1C  1C 

exp  (  -  — j  )  dr 
o  2o 


It  is  important  to  note  that  the  probability  that  any  shot 
lies  within  the  band  r^  »  0  and  rj  =  *  is  unity. 

In  the  two-dimensional  analysis,  the  bivariate  normal 
distribution  in  the  x-y  intercept  plane  is  used  for  the 
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probability  of  hit  density  function.  This  two-dimensional 
normal  can  be  given  in  the  form 


^H(x,y) 


1 

Jira 


0 

X  y 


exp 


where  o  and  o  are  the  standard  deviations  in  the  x 
X  y 

and  y  directions,  respectively,  and  p  and  m  are  the 

X  y 

mean  values  of  the  shots  about  the  x  and  y  axes, 
respectively.  The  mean  value  represents  a  bias  or  earning 
error  and  is  given  by 


N 


|1  a 


N  A- 


i“l 


*i 


where  N  is  a  large  nuinber  of  shots  and  x^  ,  y^  are  the 
X  and  y  coordinates  of  the  ith  miss  distance. 


B.  PROBABILITY  OF  KILL  FUNCTION  GIVEN  A  HIT 

For  contact  warheads,  the  aircraft  vulnerability  can  be 
represented  by  the  vulnerable  area  A^  ,  where  any  hit  within 
the  vulnerable  area  causes  an  aircraft  kill,  in  the  one¬ 
dimensional  analysis,  the  vulnerable  area  becomes  a  circle 
with  a  radius  given  by 
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and  the  P. 
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or  kill  function  is  given  by 


V 


K/H 


^K/H  "  ^ 


for 

for 


0  i  1 


r  >  r. 


This  type  of  kill  function  is  referred  to  eus  a  Cookie  Cutter 
kill  function. 

Another  kill  function  of  particular  Interest  has  the 
form 


■K/H  =■  exp  (  -  ^  ) 


(10) 


and  is  referred  to  as  a  Carle  ton  kill  function.  Note, 
that  once  again,  the  area  under  this  curve  is  the 

vulnerable  area  . 

For  the  two-dimensional  analysis,  the  circular  Carleton 
kill  function  becomes 


-iw  •  fe: 


(11) 


2  2  2 
where  r  has  been  replaced  by  x  y  in  equation  (10)  . 


Substituting  equations  (6)  and  (9)  into  equation  (4)  and 
evaluating  the  integral,  the  one-dimensional  probability  of 
kill  given  a  single  shot  for  the  Cookie  Cutter  kill  function 
becomes 


'’kss  “  ^  ^  " 


When  eqxiations  (6)  and  (10)  are  substituted  into  equation  (4) 
the  one-dimensional  probability  of  kill  given  a  single  shot 
for  the  Carle ton  kill  function  becomes 


+  2a^ 


When  equations  (8)  and  (11)  are  substituted  into  equation  (4) 
the  two-dimensional  probability  of  kill  given  a  single  shot 
for  the  Carleton  kill  function  becomes 


If  one  assumes  A 


Thva,  according  to  equation  (15) ,  Pj^gg  is  a  linear  function 
of  the  aircraft's  vulnerable  eurea. 

Detailed  evaluations  of  equations  (12) ,  (13)  and  (14) 
are  included  in  ^^pendix  A. 


III.  REDUNDANCY  AND  THE 

As  it  was  previoiisly  defined,  vulnerability  is  the 
inability  of  an  aircraft  to  withstand  one  or  more  hits  by 
damage  causing  mechanisms.  The  higher  the  vulnerability  of 
an  aircraft,  the  worse  its  chances  of  survival  are.  Thus, 
one  might  say  that  vulnerability  is  a  disadvantage  in  an 
aircraft.  In  order  to  reduce  the  vulnerability  and  overcome 
this  disadvantage,  designers  are  utilizing  six  vulnerability 
reduction  concepts  [1],  one  of  which  is  component  redundancy. 

An  aircraft  is  comprised  of  a  multitude  of  components, 

and  each  one  of  them  contributes  to  the  overall  cd.rcraft 

vulnerability.  Some  conponents  contribute  much  more  than 

the  others,  and  for  that  reason  they  are  called  critical 

con^onents.  Thus,  a  component  is  categorized  as  critical, 

if  a  hit  by  a  damage  causing  mechanism  on  the  component 

leads  to  an  aircraft  kill.  If  an  aircraft  is  comprised  of 

N  non- redundant  critical  components,  then  the  aircraft  will 

survive  if  and  only  if  each  of  the  N  critical  components 

survives.  Ihus,  the  2u.rcraft's  probability  of  survival 

after  the  first  hit,  ,  will  be 

8 

p  (1)  ,  p  (1)  *  p  (1)  *  p  ...  *p  (1)  (16) 

s  Sj_  Sj  83  Sj, 
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where  P_  ,  P_  ,  P_  ^^^...P_  are  the  probabil- 

®1  ®2  ®3  ®N 

ities  of  survival  of  critical  con^onent  1,2,3/...N  ,  after 
the  first  shot.  If  one  takes  into  consideration  equation 
(3)  the  probabili^  of  cd.rcraft  survival  could  be  written  as 

P  -  n  p  =  n  (1  -  P.  (17) 

®  i«l  ®i  i«l  ^i 

where  P  is  the  probability  of  survival  of  the  ith  corn¬ 

el 

^  ( 1) 
ponent  after  the  first  shot,  and  the  probability 

of  kill  of  the  ith  conponent  after  the  first  shot. 

If  there  eure  sets  of  redundant  critical  components,  the 
validity  of  equation  (16)  breaks  down,  that  is,  a  hit  on  a 
redvndant  critical  conponent  does  not  constitute  an  air¬ 
craft  kill,  since  another  conponent  could  sustain  the  air¬ 
craft  flight.  This  can  be  best  illustrated  by  the  following 
exanple  aircraft,  which  is  conprised  of  four  critical  com¬ 
ponents,  the  pilot,  the  fuel  tank  and  the  redundant  set  of 
engines  one  and  two.  (The  aircraft  is  assumed  to  be  capable 
of  flying  on  only  one  engine.)  Tlie  probability  that  the 
aircraft  will  survive  the  first  shot  is 


(1)  *  p  (1)  * 


where  P_  »  'P-  ^  probabilities 

®p  ®P  ®EE 

of  survival  of  the  pilot,  the  fuel  tank,  and  either  one  or 


both  engines  respectively,  since  both  engines  must  be  killed 


simultaneously  in  order  to  kill  the  aircraft.  The  pro¬ 
bability  that  either  engine  one  or  engine  two  or  both 
engines  survive  after  the  first  shot  is  given  by 


(1) 


1  -  p  (i>  » p  (1) 


(19) 


where  P.  and  P.  are  the  probability  of  kill  of 

engines  one  and  two,  respectively,  and  the  product  of 

P.  and  P.  is  the  probability  that  both  engines  will 
*^£1  *^£2 

be  killed  by  the  first  shot.  This  last  concept  is  an 
interesting  one  and  will  now  be  Investigated  fxirther. 

In  the  following  investigation,  the  one-dimensional 
expression  for  the  Cookie  Cutter  and  Carleton  kill  functions 
will  be  utilized  along  with  the  one-dimensional  prouabillty 
of  hit  density  function.  First,  using  the  Cookie  Cutter 
approach,  figure  1  represents  the  situation  for  the  vulner¬ 
ability  of  two  separate  redimdant  critical  components. 


Figure  1.  Vulnerability  of  Two  Separate  Redundant  Criti¬ 
cal  Components,  Cookie  Cutter  Approach 


19 


In  figure  1,  the  x~axis  represents  the  aircraft  length 
(vice  area,  since  one-^inensional  analysis  is  used) ,  a-b 
is  the  vulnerable  length  of  redundant  component  one,  and 
c-d  is  the  vulner2d>le  length  of  redund2mt  component  two. 

In  this  approach,  the  kills  of  redundant  components  one  and 
two  are  mutually  exclusive  events;  if  conf)onent  one  is 
killed  on  the  hit,  then  cos^onent  two  is  still  alive  and 
vice  versa,  since  only  one  vulnerable  length  could  be  hit 
at  one  time. 

With  the  Carleton  kill  fxmcbion  shown  in  figure  2 
everything  changes.  As  seen  from  figure  2,  the  kills  of 
redundant  critical  components  one  and  two  are  not  mutually 
exclusive  events. 


Carleton  kill 
function  for  RCCl 


Probability  of  hit 
density  function 


Carleton 
function 
RCC2i 


kill 

for 


RCCl 


ICC2 


A  hit  anywhere  from  to  +*  will  have  a  non-zero 

probability  of  killing  both  redundant  critical  conponents. 
In  essence,  the  Carle  ton  kill  fmction  creates  an  overlap 
of  the  components.  Ulus,  one  hit  can  possibly  kill  the 
aircraft  because  both  redundant  components  can  be  killed  by 
one  hit. 

Returning  back  to  the  exasple  aircraft,  equation  (18) 
becomes 

This  equation  is  valid  for  an  aircraft  with  one  set  of  two 
redundant  critical  components  where  only  a  kill  of  both  of 
them  will  result  in  an  aircraft  kill.  There  are  some 
other  combinations  of  redundant  critical  components  that 
one  mi^t  encounter  in  a  kill  tree  analysis.  They  are 

(1)  A  set  of  three- redundant  critical  components  and 
only  a  kill  of  all  three  will  result  in  an  aircraft  kill. 
For  this  particular  combination,  the  edrcraft  kill  logical 
e3q)ression  due  to  just  the  redundant  set  will  be 

A/C  KILLp^  «  (BC1.AND.RC2.AND.RC3) 

while  the  probability  of  ai^  one,  any  two  or  all  three 
conqponents  surviving  the  first  shot,  will  be  given  by 
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(1) 


(1) 


(1) 


(1) 


(21) 


1  -  P. 


*RC 


‘RCl 


‘RC2 


‘RC3 


where  probabilities  of 

^RC  '^RC2  ^RC3 

kill  for  redmdant  critical  conponents  one,  two  and  three, 
respectively. 

(2)  A  set  of  three  redmdant  critical  components  and 
a  kill  of  any  two  out  of  three  will  result  in  an  aircraft 
kill.  The  logical  expression  for  this  combination  is 

A/C  =  (RC1.AND.RC2)  .OR.  (RC2.  AND.  RC3)  .OR.  (RCl.  AND. RC3) 


while  the  probadsility  of  any  two  or  all  three  redundant 
critical  conponents,  surviving  the  first  shot  will  be 

P  »  1  -  P.  *  P.  -  p.  *  p, 

®RC  'to  'to  ''BC3 

(22) 

.  p  (ii  *  p  (D  +  p  a)  *  p  (1)  *  p  (1) 

%C1  ^IC3  to  to  to 

(3)  A  set  of  four  redundant  critical  components  and  a 
kill  of  any  two  out  of  four  will  result  in  an  aircraft 
kill.  Ihe  logical  espression  for  this  combination  will 
be 


A/C  KILI*nc  “  (RC1.AND.RC2)  .OR.  (RCl. AND. RC3)  .OR.  (RCl.AND. RC4) 
.OR.  (RC2.AND.RC3)  .OR.(IC2.ia«D.IC4)  .OR.  (RC3.i«D.RC4) 
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while  the  probability  of  any  two,  three  or  all  four  critical 
conponents  sxirviving  the  first  shot  will  be. 

P  t«-l-P^  *P,  *P, 

®IC  '^FCl  'to  To.  TCa 

.  p  (1)  *  p  (1) .  p  (1)  *  p  (1) 

^BC4  ^X2  ^3 

.  P  (U  *  p  (1)  .  p  (1)  *  p  (D 

^PC2  ^IC4  Sc3  ^K:4 

^  (1) .  (1)  (1)^  (1)  .  (1)  .j,  (1) 

'to.  BC2  TO  ICl  TO 


*  p  (1)  *  p  (1) 

^BC3  *Sc4 
(23) 

(4)  A  set  of  four  redundant  critical  components  euid  a 
kill  of  any  three  out  of  four  will  result  in  an  aircraft 
kill.  The  logical  esqjression  for  this  conbination  is 

A/C  KILLj^^  -  (RC1.AND.RC2.AMD.RC3)  .OR.  (RC1.AND.RC2.AND.RC4)  . 
.OR.  (RC1.AND.RC3.AND.RC4) 

.OR.  (RC2.AND.RC3.ARD.RC4} 

while  the  probability  of  any  one,  two,  three  or  all  four 
redmdant  coiq>onents  surviving  the  first  shot  will  be 


(U  *  (1)  *  p  (1)  ^  p  (1) 

Vl  ^TO  V4  \c2 

+  P^  (1)  *P,  *P.  *P^ 

'^TO  'TO  'to  '^BC4 


(1)  *  p  (1)  * (1) 


P  »  1  -  P.  '*'  *  P^  '**  * 

®RC  ^RCl  ’^RC2  ^RC3 


-  P 


(1)  *  (1)  *  p  (1) 

'^RCl  RC2  ^RC4 


-  P 


(1)  *  p  (D*  p  (1) 

RCl  RC3  '^RC4 


_  p  (1)  *  p  (1)  *  p 

*^k  *^k  ^k 

RC2  RC3  RC4 


(1) 


+  p  (1)  *  p  (1)  *  p  (1)  *  p  (1) 

^RCl  '^RC2  ^RC3  RC4 


(24) 


(5)  A  set  of  four  redisidant  critical  components  and  a 
kill  of  all  four  only  will  result  in  an  aircraft  kill. 

The  logical  expression  for  this  combination  will 

A/C  Kll'l'pc  =  RC1.AND.RC2.AND.RC3.AND.RC4 

while  the  prc^eUsility  that  any  one,  two,  three  or  all  four 
redundant  conponents  will  survive  the  first  shot  will 

P  »  1  -  Pj^  *  ^k  *  ^k  *  ^k 

®RC  RCl  ''RC2  '^RC3  '^RC4 
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AND  REDUNDANCY 


IV. 


K/H 


The  analysis  done  in  the  previous  chapter,  though 
necessary,  was  limited  to  the  probability  that  an  aircraft 
is  killed  due  to  a  single  shot.  A  further  and  more 
realistic  analysis  stems  from  the  fact  that  in  any  given 
combat  sceneirio,  an  aircraft  is  likely  to  take  multiple 
hits.  Ttius,  the  total  probability  of  kill  of  an  aircraft 
that  has  taken  multiple  hits  will  now  be  examined. 

If  one  assvimes  that  an  aircraft  consists  of  N  critical 
components  and  that  it  heis  taken  n  hits  is  given  by 


(1) 


®i 


(2) 


(3) 


n 

n 

J«1 


(26) 


where  ,  P^  are  the  probabil- 

®i  ®i  ®i  ®i 

ities  that  the  ith  critical  coiiponent  will  survive  the 

first,  second,  third.  ..nth  hit,  respectively.  Using  a 

parallel  which  may  be  inferred  from  equation  (17) , 

-(n)  ^  ^ 

P  =  n  (1  -  P  )  (27) 

®i  j=l 

where  is  the  probability  that  the  ith  component  will 

be  killed  by  the  jth  hit.  In  a  similar  manner,  the  total 
probability  of  aircraft  survival  after  n  hits  can  be 
derived  to  yield 
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(28) 


p  a  n  (1  “  P 
s  j=l  *^K/H  ' 


where  is  the  probability  that  the  aircraft  will  be 

killed  by  the  jth  hit. 

In  the  case  of  an  aircraft  consisting  of  only  non- 
redundeuit  critical  con?)onents,  the  does  not  change 

with  each  hit  because  the  vulnerable  area  is  consteuit  for 
each  hit.  However,  in  the  case  of  redundant  critical  com¬ 
ponents,  Pr/h  changes  considerably  due  to  the  increasing 
probability  the  redxandant  critical  components  are  killed  eutid 
thus,  it  will  be  studied  separately. 

Hie  sin?>lest  approach  to  the  P^/g  with  redundancy 
study  is  through  the  use  of  a  kill  tree  diagram.  For  that, 
assume  an  A/C  consisting  of  three  non-redundant  critical  com¬ 
ponents  CCl,  CC2  and  CC3,  with  individual  probad>ilities  of 

kill  ,  Pj^^  ,  Pj^^  ,  respectively,  and  or  set  of 

12  3 

two  redundant  critical  components  RCCl  euid  RCC2  with  indi¬ 


vidual  probeibilities  of  kill  P, 


and  P„  ,  respec- 


tively.  Thus,  the  kill  diagram  is  depicted  on 
figure  3  for  the  first  hit  on  the  aircraft  and  the  Pj 
for  the  Cookie  Cutter  approach  becomes 


*  ^K/H^  ^K/H3 
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CCl  CC2  CC3 

(KILL)  (KILL)  (KILL) 


RCCl 

(NO  KILL) 


RCC2 
(NO  KILL) 


NKl 

(NO  KILL) 


Figure  3.  Aircraft  Kill  Tree  Diagram,  First  Hit 

In  order  for  the  A/C  to  be  killed  by  the  second  hit,  one 
must  assume  that  it  survived  the  first  hit,  and  therefore 
only  the  RCCl,  RCC2  and  NKl  branches  will  be  affected  by 
the  second  hit.  Thus,  the  kill  tree  for  the  second  hit 
alone  is  depicted  on  figures  4a,  4b  and  4c. 


RCCl 


(KILL)  (KILL)  (KILL)  (NO  KILL) 


(KILL) 


(NO  KILL) 


Figure  4a.  Aircraft  Kill  Tree  Diagram,  Second  Hit  Alone 


Flgvire  4c.  Aircraft  Kill  Tree  Diagram,  Second  Hit  Alone 
Thus,  the  probability  of  the  A/C  being  killed  by  the  second 


hit  alone  becomes 


p  (2)  .  p 


*  (p  <2)  ^  „  (2)  ^  „  (2) 


R1 


P  4.  P  '  '  4.  P 

k/H^  ^  '^k/B^  IC/H3  *  *^k/H 


(2) 


H2y 


+  p 


k/H 


(1)  * 


R2 


fp  A  p  ^2)  ■  «  \“/  .  p 

r  k/H,  *  k/H,  ^ 


(2)  ^  „  (2)' 


k/H,  '"k/H 


Rl/ 


(2)1 


(30) 


where  is  the  probability  that  all  of  the  critical 

components  siirvived  the  first  hit  (the  NKl  branch)  .  Thus, 
the  total  probability  of  kill  for  the  two  hits 
becomes 


Pj^"«2)  .  +  p^(2)  (31) 

One  could  go  on  to  the  third  and  subseqtient  hits  in  a 
similar  manner,  and  the  will  be  increasing  as  more 

and  more  terms  are  added  for  the  subsequent  hits. 

Another  method  of  computing  the  total  probability  of 
kill  is  the  transition  matrix  method  [2].  Using  that 
method  on  the  following  exasple  aircraft,  one  can  clearly 
see  the  effect  of  redundancy  on  the  P^/u  • 
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VC  «I  (NO  EEDONDAHCC) 


CRITICAL  COMPONENT 

K  (ft  > 

Pi 

Pilot 

5 

1.0 

5 

Engine 

30 

.8 

24 

Fuel  Tank 

40 

.6 

24 

Controls 

25 

.6 

15 

Total  aircraft  area  present  to  the  threat  propagator  is 


assumed  to  be 


-  500  ft" 
P 


and  A_ 


is  the  area  pre¬ 


sented  by  the  ith  component,  probability  of 

ith  component  given  a  hit  on  the  ith  conponent,  and  A^ 
is  the  vulnerable  area  of  the  ith  conqponent.  The 
logical  kill  expression  for  this  atircraft  will  be 


VC  KILL  «  PILOT. OR.ENGINE.OR.FUEL.OR.CONTROLS 
VC  t2  (25%  REDUNDANT)  A^  «  500  ft^ 


CRITICAL  COMPONENT 

A  (ft2) 

'"k/h^ 

A^_(ft 

Pilot 

5 

1.0 

5 

Engine 

30 

.8 

24 

Fuel  Tank 

40 

.6 

24 

Controls  I 

12.5 

.6 

7.5 

Controls  II 

12.5 

.6 

7.5 

30 


nie  logical  expression  for  this  aircraft  is 


A/C  KILL  -  PILOT. OR. ENGINE. OR. FUEL. OR 

,.  (CONTROLI.AND.CONTROLII) 

A/C  «3  (46%  REDUNDANT) 

CRITICAL  COMPONENT 

A^  -  530  ft^ 

^k/^i 

A  (ft^) 
i 

Pilot 

5 

1.0 

5 

Engine  I 

30 

.8 

24 

Engine  II 

30 

.8 

24 

Fuel  Tank 

40 

.6 

24 

Controls 

25 

.6 

15 

The  logical  kill  expressicm  for  this 

A/C  KILL  -  PILOT. OR.FUEL.OR.CONTROLS. 

aircraft  is 

OR.  (ENGINEI 

.AND. 

ENGINEII) 

A/C  #4  (77%  REDUNDANT) 

CRITICAL  COMPONENT 

A^  -  530  ft^ 
P 

‘■k/hi 

A^  (ft^) 

Pilot 

5 

1.0 

5 

Engine  I 

30 

.8 

24 

Engine  II 

30 

.8 

24 

Fuel  Tank  I 

20 

.5 

10 

Fuel  Tjuik  II 

20 

.5 

10 

Controls 

25 

.6 

15 

The  logical  expression  for  A/C  #4  is 

A/C  KILL  «  PILOT. OR.CONTROLS. OR.  (ENGINEI. AND. ENGINEII)  . 
OR.  (FDELI.AND.FUELII) 
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TABLE  1 


CUMULATIVE  PROBABILITIES 

OF  KILL 

FOR  EXAMPI£ 

AIRCRAFT 

A/C  #1 

A/C  #2 

VC  #3 

A/C  #4 

.1360 

.1060 

.0  830 

.0377 

- 

.2535 

.2012 

.16  32 

.0788 

- 

.3550 

.2866 

.2397 

.1220 

p  -(4)  ^ 

.4227 

.3633 

.3117 

.1662 

p-(5)  . 

k 

.5185 

.4320 

.3788 

.2107 

p  -(6)  - 

.5840 

.4934 

.4411 

.2548 

P  -<7)  . 

k 

.6406 

.5485 

.4984 

.2981 

- 

.6895 

.5978 

.5508 

.3403 

V”  - 

.7317 

.6418 

.5986 

.3809 

P-(IO)  . 

.7682 

.6811 

.6419 

.4199 

Figvire  5  oompaies  the  for  the  nonredundant  aircraft  #1 

with  redxmdant  aircraft  #2,  3  and  4. 


Note  that  the  values  of  and  assumed, 

while  the  values  of  are  computed  through  the  equation 


* 


(32) 


Through  the  use  of  the  transition  matrix  method  (see 
i^pendix  B)  ,  the  values  of  for  the  example  aircraft 

have  been  found  and  eu:e  presented  in  Table  1. 

As  can  be  very  easily  seen  from  Table  1,  the  for 

the  same  shot  decreases,  as  the  redtndeuicy  of  the  example 
aircraft  increases. 
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V.  AFATL  POOL  OiMPOTER  PROGRAM  AND  THE 

As  shown  by  the  previous  chapters,  the  determination  of 
the  survivability  of  an  aircraft  can  be  a  very  conplex  and 
tine  consuming  task,  nius,  the  aid  of  the  computer  has  been 
employed,  and  several  programs  have  been  developed  by  both 
the  military  and  the  civilian  industry.  One  that  was 
selected  for  use  by  the  Joint  Technical  Coordinating  Group 
for  Aircraft  Survivability  (JTCG/AS)  Survivability  Assessment 
SdDgroup,  is  the  Antiaircraft  Artillery  Simulation  Computer 
Program,  AFATL  Program  POOl.  This  program  is  currently  in 
use  at  the  Naval  Postgraduate  School  and  is  the  one  that 
this  study  will  be  concerned  with. 

Many  modifications  have  been  made  to  the  POOl  that  was 
originally  developed  by  the  Weapons  Systems  Analysis 
Division  of  the  Air  Force  Armament  Laboratory  at  Eglin  Air 
Force  Base,  Florida.  The  latest  version  of  it  used  by  Naval 
Weapons  Center,  China  Lake,  enploys  an  aircraft  consisting 
of  twenty  (20)  critical  conponents  and  computes  the  single 
shot  probability  of  kill  of  a  target  (after  consideration 
is  given  to  various  errors  in  predicting  an  aircraft/ 
projectile  intercept  point) .  Computation  of  the  ^1^33  is 
performed  throughout  the  entire  flight  path  and  after  the 
accummlation  of  all  shots,  the  total  probedsility  of  taurget 
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attrition  is  presented.  In  the  confutation  of  the  cumulative 
f-  ,  redmdeuicy  of  the  critical  components  has  not  been 

A 

taken  into  consideration.  Hhi..  is  a  potential  source  of 
error  in  the  final  results,  since  the  majority  of  the 
present  aircraft  have  some  degree  of  redundancy. 

In  the  latest  version  of  PCX>1,  the  confutation  of  the 
single  shot  probability  of  kill  is  performed  in  the  "FIRE" 
section  of  the  progreun.  The  equation  used  to  compute  the 
probability  of  killing,  at  least  one  critical  component  by 
a  single  round,  ,  is  presented  on  line  717  of  the 

program  listing  given  in  Appendix  C,  and  it  states 

fK  -  Fk  +  PKS(IJ)  -  Pk*PKS(IJ)  ■  PK  +  PKS(IJ)*(1  -  PK) 

where  the  initial  value  of  Pj^  is  set  to  zero  and  P^sdj) 
is  the  probability  of  killing  confonent  IJ  by  a  single 
round.  This  equation  does  not  account  for  redundancy 
because  confonent  IJ  might  be  redundant  in  the  aircraft 
and  killing  it  will  not  constitute  an  aircraft  kill,  as  it 
was  discussed  in  Chester  3.  Thus,  in  order  for  the  program 
to  account  for  possible  redundancy  of  components,  the 
following  changes  and  additions  to  PCX71  are  recommended. 
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Define: 

IJl  s  the  total  number  of  non-redundant  components 
IJ22  •  the  total  number  of  sets  of  two  redmdant  components 
of  which  two  must  be  killed  for  a  subsystem  kill 
IJ23  «  the  total  number  of  sets  of  three  redundant  components 
of  which  two  must  be  killed  for  a  subsystem  kill 
IJ33  >  the  total  number  of  sets  of  three  redundant  coirqponents 
of  which  three  must  be  killed  for  a  subsystem  kill 
IJ24  a  the  total  number  of  sets  of  four  redundant  components 
of  which  two  must  be  killed  for  a  subsystem  kill 
IJ34  s  the  total  number  of  sets  of  four  redundant  components 
of  which  three  must  be  killed  for  a  subsystem  kill 
IJ44  *  the  total  number  of  sets  of  four  redundant  components 
of  which  four  must  be  killed  for  a  subsystem  kill 
Thus,  IJ  =  IJl+2*(IJ22)-l'3*(IJ23+IJ33)+4*(IJ24+lJ34+IJ44)  <  20 
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Define: 

MN(I) 


M22(I,J) 

M23(I,J) 

M33(I,J) 

M24(I,J) 

M34(I,J} 

M44(I,J) 


A  colvum  matrix  containing  the  numbers  of  the  non- 
redundant  components 

A  (IJ22x2)  matrix  contedjiing  the  IJ22  pairs  of 
redundant  con^onents  (Isl,IJ22,  Jsi,2) 

A  (IJ2  3x3)  matrix  contauning  the  1J2  3  sets  of 
three  redundant  components  (I=1,IJ23,  J=l,3) 

A  (IJ33x3)  matrix  containing  the  IJ33  sets  of 
three  redundeuit  components  (I=1,IJ33,  J=l,3) 

A  (IJ24x4)  matrix  containing  the  IJ24  sets  of 
foxir  redmdant  components  (Isl,IJ2  4,  Jsi,4) 

A  (IJ34x4)  matrix  containing  the  IJ34  sets  of 
four  redundant  components  (I=1,IJ34,  J*l,4) 

A  (IJ44x4)  matrix  containing  the  IJ44  sets  of 
four  redundant  components  (Isl,IJ44,  J-1,4) 


\ 

f 
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The  user  must  create  a  file  containing  the  number  of  the 
non- redundant  components,  then  redundant  coitponents  them¬ 
selves,  the  number  of  the  IJ22,IJ23,IJ33,IJ24,IJ34,IJ44  sets, 
and  the  numbers  of  the  components  that  belong  to  each  set  as 
shown  below: 


w  w 

IS 


rH  CvJ  rH 

yH  •  •  •  * 

•n  fH  fH  CN|  Cs| 


w  CM  CS  CN4  <M 


tM  <SI  ^ 

tM  C'J  rH  tM 

-J  “  “  “ 


w  ro  w  w  ^ 

tM  tM  CM  to  tn  m 

CM  CM  CM  CM  CM 

X  X  >-•  X  S  3S 


etc.  (max  t  of 
characters  •*  38) 


IJl  2*IJ22  3*IJ23 


Once  the  file  is  constructed,  the  NN,M22,M23,M33,M24,M34,M44 
matrices  can  be  read,  with  the  following  routine; 

PEAD(2,*)  (TEMP(I)  ,I»1,38) 

1=1 

1J1=TEMP(I) 

IP  IJ1=0  GO  TO  6 
DO  5  K=1,IJ1 

MN(K)=TEMP(I+K) 

5  CONT 

6  I«1+IJ1+1 
IJ22«TEMP(I) 

IP  IJ22-0  GO  TO  10 
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DO  15  K=l,  IJ22 


M22  (K ,  1}  ^TEMP  (I+K) 
M22  (K ,  2)  -TEMP  (I+K+1) 
1*1+2 

15  CONT 

10  1*2+IJ1+2*IJ22+1 

IJ2  3+TEMP(I) 

IF  IJ2  3-0  GO  TO  20 
DO  25  K*1,IJ23 

M23(K,1)*TEMP(I+K) 

M2  3  (K ,  2 )  +TEMP  (I+K+l) 
M2  3 (K , 3) »TEMP (I+K+2) 
I«I+3 

25  CONT 

20  I*3+IJ1+2*IJ22+3*IJ2  3+1 

IJ33=TEMP(I) 

IF  IJ33  *  0  GO  TO  30 
DO  35  K»1,IJ33 

M33(K,1)»TEMP(I+K) 
M33(K,2)*TEMP (I+K+l) 
M33 (K, 3) -TEMP (I+K+2) 
I«I+3 

35  CONT 


40 


30  I=4+IJ1+2*IJ22+3*IJ2  3+3*IJ33+1 


IJ24=TEMP(I) 

IF  IJ24*0  GO  TO  40 
DO  45  K*1,IJ24 

M2  4(K,1)=TEMP{I+K) 

M2 4 (K , 2 ) =TEMP ( I+K+1) 

M24(K, 3)=TEMP(I+K+2) 

M2  4  (K ,  4)  =TEMP  ( I+K+  3) 

1=1+4 

45  CONT 

40  I=5+IJ1+2*IJ22+3*IJ23+3*IJ33+4*IJ24+1 

IJ34=TEMP(I) 

IF  IJ34=0  GO  TO  50 
DO  55  K=1,IJ34 

M34(K,1)=TEMP{I+K) 

M34 (K , 2 ) =TEMP { I+K+1 ) 
M34(K,3)=TEMP(I+K+2) 

M34  (K,  4)  =TEMP  (I+K+3) 

1=1+4 

55  CONT 

50  I=6+IJ1+2*IJ22+3*IJ23+3*IJ33+4*IJ24+4*IJ34+1 

IJ44=TEMP(I) 

IF  IJ44-0  GO  TO  60 
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DO  65  K>1,1J44 

M44(K,1}«TEMP(I+K) 

M44(K,2)«TEMP(I+K+1) 

M44  (K ,  3)  -TEMP  (I+K+2 ) 

M4  4 (K , 4 ) -TEMP ( I+K+  3) 

I-I+4 

60  STOP 
END 

Once  the  matrices  have  been  constructed,  the  following 
subroutine  could  be  used  to  compute  the  cumulative  prob~ 
ability  of  adrcraft  survival.  The  cumulative  probability 
of  kill  of  each  of  the  coii{>onents  (CPKS(IJ))  is  computed 
at  line  722.  This  probability  is  computed  for  all  of  the 
components  in  the  DO  to  460  loop.  Immediately  after  the 
460  loop  (before  line  72)  a  call  to  the  following  sub** 
routine  should  be  made.  The  parameter  confuted  by  this 
subroutine  is  the  probability  the  aircraft  has  survived 
the  encounter  up  to  the  current  time,  PS  ,  the  cumulative 
probability  of  survival.  Note  that  the  PK  and  PS 
confuted  at  lines  717,  727,  and  732  are  no  longer  valid 
when  redundant  conponents  axe  introduced. 
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PS-1. 

IF  IJlsO  GO  TO  10 
DO  5  K»1,IJ1 

L-MN(K) 

PS«PS*(1.-CPKS{L) ) 

CPKS  is  the  cvunulative  probability  of  stirvival  of  the 
condone nt 
5  CONTINUE 
10  IF  IJ22-0  GO  TO  20 
DO  15  K»1,IJ22 
L»M22(K,1) 

M-M22(K,2) 

PS-PS* ( 1 . -CPKS  CL) *CPKS (M) ) 

15  CONTINUE 
20  IF  IJ23-0  GO  TO  30 
DO  25  K»1,IJ23 
L»M23(K,1) 

M=M23(K,2) 

N«M23(K,3) 

PS»PS*(1.-CPKS(L) *CPKS(M) -CPKS(L) *CPKS(N) 

-CPKS (M) *CPKS (N) +CPKS (L) *CPKS (M) *CPKS (N) ) 

25  CONTINUE 
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30  IP  IJ33*0  GO  TO  40 
DO  35  K»1,IJ33 


L*M33(K,1) 

M«M33(K,2) 

NsM33(K,3) 

PS»PS*(1.-CPKS(L)  *C3>KS  (M)  *CPKS  (N)  ) 


35  CONTINUE 
40  IF  IJ24»0  GO  TO  50 
DO  45  K»1,IJ24 

L«M24(K,1) 

M«M24(K,2) 

N*M24(K,3) 

I»M24(K,4) 


PS=PS* (l.-CPKS (L) *CPKS (M) -CPKS (L) *CPKS (N) -CPKS (L) 

*  *C3>KS  (I)  -C3»KS  (M)  *CPKS  (N)  -C3»KS  (M)  *C3>KS  (I) 

*  -CPKS (N) *CPKS (I) +CPKS (L) *CPKS (M) *CPKS (N) 

*  +CPKS(L) *CPKS(M) *CPKS(I)+CPKS(L) *CPKS(N) 

*  *CPKS(I)+CPKS(M) *CPKS(N) *CPKS(I) +CPKS(L)*CPKS  (M) 

*  *CPKS(N)*CPKS(I)) 


45  CONTINUE 
50  IF  IJ34*0  GO  TO  60 
DO  55  K-1,IJ34 

L«M34(K,1) 

M«M34(K,2) 

N-M34(K,3) 

I«M34(K,4) 
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PS»PS*(1.-CPKS(L)  *CPKS(M)  *C3»KS  (N)  -CPKS(L)  *CPKS  (M) 
*CPKS (I) -CPKS (L) *CPKS (N) *CPKS (I) -CPKS (M) 

*CPKS (N) *CPKS (I) +CPKS (I) *CPKS (M) *CPKS (N) 
*C3»KS(1)  ) 

55  CONTINUE 
60  IF  IJ44*0  GO  TO  70 
DO  65  K*1,IJ44 

L«M44(K,1) 

M»M44(K,2) 

NsM44 (K,  3) 

I«M44(K,4) 

PS*PS* (l.-CPKS (L) *CPKS (M) *CPKS (N) *CPKS (I) ) 

65  CONTINUE 
70  WRITE  (6,100)  PS 

100  POBHJffCl,  'THE  CUMULATIVE  PROBABILITY  OF  SURVIVAL  IS, 
F9.7) 

RETURN 

END 


,  CONCLUSIONS 


Ihe  probability  of  kill  of  an  ed.rcraft  given  a  single 
shot  is  a  linear  function  of  the  aircraft's  vulnerable  area. 
Redundancy  of  critical  components  greatly  enhances  the 
probability  of  survival  and  in  the  Cookie  Cutter  approach 
the  kills  of  redundant  critical  components  are  mutually 
exclusive  events,  where  as  in  the  Carleton  approach  they 
are  not.  For  an  aircraft,  hit  by  multiple  shots  the 
cumulative  probability  of  kill  for  the  same  shot  decreases 
as  the  redvmdancy  built  into  the  aircraft  increases.  The 
modifications  proposed  in  Chapter  V  should  provide  a 
significant  inprovement  in  the  overall  efficiency  of  the 
Antiaircraft  Artillery  Simulation  Computer  Program,  since 
it  will  provide  for  aircraft  redundancy. 


j 
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2 

Using  integration  by  parts,  let  -  r 


Differentiation  yields  -  2r  ( — ^  ^  )  dr  =  du 

V  20^  r/  ' 

therefore 
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Separating  variables  and  making  substitutions  yields. 


where 
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APPENDIX  B 


P„  CALCULATIONS  THROUGH  THE  TRANSITION  MATRIX  METHOD 

K  _  _ _ _ 


TABLE  2 

Computation  of  the  Transition  Matrix  (T)  for  Example  A/C  #3 
Probability  of  Transitioning  from  this  State  to  this  state 


Knrc 

Krcl 

Krc2 

Krc 

Nk 

1 

5+24+15 

—TW~' 

5+24+15 

~~TW~ 

0 

5+24+15 

“316“ 

Knrc 

0 

2  4+438 

0 

0 

24/530 

Krcl 

= 

3  0 

0 

24+438 

0 

24/530 

Krc2 

0 

24/530 

24/530 

1 

0 

Krc 

0 

0 

0 

0 

438/530 

Nk 

(Note  that  the 

svnn  of 

each  column 

is 

unity. ) 

Now,  let  the  probability  that  the  aircraft  exists  in  each  of 
of  the  five  possible  states  after  the  jth  hit  be  expressed 
by  a  vector  |s  i  ,  where 


(j) 
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Th.e  probability  that,  the  aircraft  is  in  each  of  the  five 
states  after  the  (j-(-l)th  hit  is 


(B-1) 

that  is,  the  aircraft  transitions  from  to 

to  [T],  Thus,  the  cumulative  probability  the  aircraft  is 

killed  after  j+1  hit,  »  is  given  by 

Prior  to  the  first  hit,  the  aircraft  is  entirely  in  the  Nk 
state.  Thxis,  according  to  equation  (B-1)  , 


=  CTljs}”  .  [T] 


euld  hence. 


Thus  P-, 
*^1 


/  44/530  ^ 

1 

.0830  \ 

\  24/530 

.0452  1 

<  24/5  30  , 

^  -  < 

.0452  > 

1  ° 

0  1 

V  438/530/ 

^ .8264  } 

«  .0830. 


(1) 

^  Knrc 


^Krc 


Similarly,  for  the  second  hit. 


(1) 


(2) 


1 

53? 


.0830 

.0452 

.0452 

0 

.8264 


530*44+44*24+44*24+44*438' 
462^24+24*438 
462*24+24*438 
24*24+24*24 
.438*438 


(2) 


Knrc 


(2) 


.1591 
.0769 
.0769 

.0041  I  < — Krc 

.6  829 


Thus,  after  the  second  hit 


a:  (2) 


.1591  +  ,0041 


Similarly,  the  val^le8  for  '  etc.,  are 

obtained  to  yield  Table  1. 
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APPENDIX  C 


pool  •FIRE'  SECTION 


703  C 

704  C  COMPUTE  SURVIVAL  AND  KILL  PROBABILITIES 

705  C 

706  STUFF=DIVIDE (BXF2 , CSXF2+AVTPI) ) +DIVIDE 
(BYF2 , {SYF2+AVTPI) ) 

707  C 

70  8  CC  PKS(IJ)  IS  THE  PROBABILITY  OF  KILLING  C(»IPONENT  IJ 
BY  A  SINGLE  ROUND 

709  CC  (ONE  BARREL) 

710  C 

711  PKS(IJ)*AMIN1{1.0,DIVIDE(EXP(-.5*STUFF) *AVTPI, 

712  SQRT( (SXF2+1AVTPI) *(SYF2+AVTPI) ) ) ) 

713  C 

714  CC  PK  IS  THE  PROBABILITY  OF  KILLING  AT  lEAST  ONE 

COMPONENT  BY  A  SINGLE 

715  CC  ROUND  (ONE  BARREL) 

716  C 

717  PK=PK+PKS ( IJ) -PK*PKS (IJ) 

718  C 

719  CC  CPKS(IJ)  IS  THE  CUMULATIVE  PROBABILITY  OF  KILLING 

COMPONENT  IJ 
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720 

CC 

BY  THIS  GUN  LOCATION  FOR 

THE  ENTIRE 

AIRCRAFT  FLIGHT 

PATH 

721 

C 

722 

460  CPKS(IJ)*CPKS(IJ)  +  (l-a-PKStIJ)  ) 

**ISB)-(CPKS(IJ) * 

72  3 

*(1-(1-PKS(IJ) **ISB) ) 

72  4 

C 

725 

CC 

PS  IS  TOE  PROBABILITY  OF 

ALL  COMPONENTS  SURVIVING 

ISB  BARBELS  FIRING 

726 

C 

727 

PS={1.0-PK) **ISB 

728 

C 

729 

CC 

PK  IS  TOE  PROBABILITY  OF 

KILLING  AT 

LEAST  ONE 

COMPC»]ENT  BY  ISB 

730 

CC 

BARRELS  FIRING 

731 

C 

732 

PK-l.O-PS 

733 

TI»TIME+T 

734 

C 
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